Hi, sqlipool was fine, one more question: We have sql based authentication so user are un radcheck table. There's a way so i can setup a default pool for all users ? i need to use also a user file and insert the DEFAULT Pool-Name := main_pool statement ? On standard rlm_ipool module i can find the override = no option. Ther's a similar option on sql module ? -- Fabrizio Fiore Donati Mobile: +39 3289872420 E-mail: fabrizio.fioredonati@2bite.net 2bite s.r.l. Via Saragat snc 67100 L'Aquila (AQ) - Italy Tel.: +39 0862441583 2015-02-05 12:16 GMT+01:00 Tevfik Ceydeliler < tevfik.ceydeliler@astron.yasar.com.tr>:

Depends what u need. rlm_sqlhplwippool implements dynamic IPv4 address pools with the following features:

* SQL-based * hierarchical * prioritized * weighted

rlm-sqlippool just assign IP address.

If u believe simply is the best, I suggest second one.

On 02/05/2015 12:55 PM, Fabrizio Fiore Donati wrote:

...

Hi, we need to user sql ip pool to assign the ip to the customer. About 10000 ip address. I see that i can use two module, Rlm_sqlhpwippool or Rlm_sqlippool

which one do you suggest ? any special requirements ?

-- Fabrizio Fiore Donati

Mobile: +39 3289872420 E-mail: fabrizio.fioredonati@2bite.net

2bite s.r.l. Via Saragat snc 67100 L'Aquila (AQ) - Italy Tel.: +39 0862441583 - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html

--

<br> <img src="http://www.yasar.com.tr/banner/yhbanner.jpg"> </img> <br><br> Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system. - List info/subscribe/unsubscribe? See http://www.freeradius.org/ list/users.html

Hi, I use OTP servers to verify defines users on Freeradius, I think my OTP server calls proxy in this case. After MOTP verify password, then Freeradius assign an IP address from related IP pool. My question is,under this topologywhile create user in Freeradius, dı I have to need to use Clerstext-Password attribute? <br> <img src="http://www.yasar.com.tr/banner/yhbanner.jpg"> </img> <br><br> Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.

When I delete "Cleartext-Password" attribute from user ( I use mysql to create or delete userand its attribute) I get this error: ######################## [sql] expand: %{User-Name} -> tevfikceydeliler [sql] sql_set_user escaped user --> 'tevfikceydeliler' rlm_sql (sql): Reserving sql socket id: 4 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'tevfikceydeliler' ORDER BY id rlm_sql: The 'Attribute' field is empty or NULL, skipping the entire row. rlm_sql (sql): Error getting data from database [sql] SQL query error; rejecting user rlm_sql (sql): Released sql socket id: 4 ++[sql] returns fail Using Post-Auth-Type Reject # Executing group from file /etc/freeradius/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> tevfikceydeliler attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 12 to 10.65.8.117 port 62681 Waking up in 4.9 seconds. Cleaning up request 0 ID 12 with timestamp +27 Ready to process requests. ############################ I use OTP as realm/proxy to verify password of users. So, cleartext password is not necessary i think. What should I do as attribute? On 02/16/2015 03:54 PM, Alan DeKok wrote:

On Feb 16, 2015, at 4:22 AM, Tevfik Ceydeliler <tevfik.ceydeliler@astron.yasar.com.tr> wrote:

...

I use OTP servers to verify defines users on Freeradius, I think my OTP server calls proxy in this case. After MOTP verify password, then Freeradius assign an IP address from related IP pool. My question is,under this topologywhile create user in Freeradius, dı I have to need to use Clerstext-Password attribute? No.

Alan DeKok.

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-- <br> <img src="http://www.yasar.com.tr/banner/yhbanner.jpg"> </img> <br><br> Bu elektronik postada bulunan tum fikir ve gorusler ve ekindeki dosyalar sadece adres sahip/sahiplerine ait olup, Yasar Toplulugu Sirketleri bu mesajin icerigi ile ilgili olarak hic bir hukuksal sorumlulugu kabul etmez. Eger gonderilmesi dusunulen kisi veya kurulus degilseniz, lutfen gonderen kisiyi derhal haberdar ediniz ve mesaji sisteminizden siliniz.The information contained in this e-mail and any files transmitted with it are intended solely for the use of the individual or entity to whom they are addressed and Yasar Group Companies do not accept legal responsibility for the contents. If you are not the intended recipient, please immediately notify the sender and delete it from your system.